This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft File: 30C896473FC5DE403F4651059F6BE1586BFAC473.mft (raw, json) Hash identifier: J1i8jA+B4UUEANx9vOKhGR90rCIdQrPrqGR8gGGqUx8= Subject key identifier: 54:BB:31:95:F3:FE:28:26:AD:0C:A8:6A:12:5A:EE:BD:77:90:0C:3F Authority key identifier: 30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 Certificate issuer: /CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Certificate serial: 49D2D6483CFE4A454A960B3DEF09B2ECDCC884C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft Manifest number: DC Signing time: Mon 29 Dec 2025 23:01:53 +0000 Manifest this update: Mon 29 Dec 2025 22:56:53 +0000 Manifest next update: Fri 02 Jan 2026 06:33:53 +0000 Files and hashes: 1: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: x/vtNdgftiP2gNHQRXmqF+bNIt+0K74KbEvvSueFvXY=) 2: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: jM3o+qLgLitpWG9aIDTu7g7FqrNoiH7dHWh51KuZSvY=) 3: 30C896473FC5DE403F4651059F6BE1586BFAC473.crl (hash: LAlglmhOUPIsCLIZ2F4+7QZiWjD0QBOZyP8CKXspsi8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 06:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d2:d6:48:3c:fe:4a:45:4a:96:0b:3d:ef:09:b2:ec:dc:c8:84:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C896473FC5DE403F4651059F6BE1586BFAC473 Validity Not Before: Dec 29 22:56:53 2025 GMT Not After : Jan 2 06:33:53 2026 GMT Subject: CN=54BB3195F3FE2826AD0CA86A125AEEBD77900C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:de:0a:d0:2d:6d:39:b7:6c:6a:32:ac:1c: 64:29:7b:fe:b5:cb:47:32:64:b8:7e:c4:d4:37:5f: ed:bc:83:1a:11:a9:7d:b1:89:c6:7e:48:2d:d5:a2: cc:d8:75:fe:0f:88:24:f7:39:e0:74:af:fd:bd:86: 73:52:8b:2f:32:ad:de:41:75:a1:85:9e:41:f7:57: 0c:e0:78:13:c2:87:4c:0f:6e:e7:71:87:94:88:f7: 81:b7:ed:17:20:ca:de:4a:14:e9:ee:0c:bc:7f:22: ff:40:d6:4d:f9:fe:82:f2:7c:24:df:18:89:e8:d0: 80:f0:4a:5f:bf:0f:a5:17:70:ef:ad:75:e5:45:d7: 32:f3:8d:c8:7b:1a:5b:1f:6a:d6:08:7d:a6:73:d2: 27:96:67:45:52:0c:8f:67:9f:ee:fe:fb:04:3a:48: b3:15:8b:2a:71:50:c1:33:a6:50:38:21:e4:90:89: b1:1a:17:01:22:60:50:b5:06:71:49:fa:91:2b:61: 71:17:c0:de:5b:ae:9a:05:5c:af:1d:75:da:8f:b6: c7:0a:6f:69:89:0e:00:6d:f3:6e:37:d0:d1:ab:cc: b9:71:a6:5c:b8:71:5c:bf:71:e1:7d:dc:bc:b4:07: 98:e9:32:24:9e:30:27:0e:e0:13:ed:d9:ff:8f:94: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BB:31:95:F3:FE:28:26:AD:0C:A8:6A:12:5A:EE:BD:77:90:0C:3F X509v3 Authority Key Identifier: keyid:30:C8:96:47:3F:C5:DE:40:3F:46:51:05:9F:6B:E1:58:6B:FA:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/30C896473FC5DE403F4651059F6BE1586BFAC473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/30C896473FC5DE403F4651059F6BE1586BFAC473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0a:aa:a0:5b:26:85:e3:10:ba:a0:7e:19:0d:03:89:4e:90: 75:f8:15:ec:3a:65:9e:fd:5f:56:de:a3:77:00:48:41:8f:f6: 7a:fe:bd:68:ea:0f:db:ff:50:f5:0a:23:61:d5:19:8e:9d:a6: 0e:25:7d:67:27:fb:f3:ef:4e:3a:0e:f7:b2:69:47:eb:bb:a6: b5:df:9b:f0:eb:32:9d:4b:5a:aa:d9:42:37:46:59:ea:d9:07: c3:2d:77:25:56:72:fd:fc:98:a8:72:71:ed:63:a9:0d:05:f1: c0:81:3d:d7:ad:d1:7e:28:0f:c6:a1:54:ee:52:85:c4:a6:41: 22:84:5d:df:87:82:76:b8:52:16:05:f9:57:ba:c9:be:41:a9: f1:70:8c:04:21:9b:d5:81:e4:6d:30:1b:81:80:9a:1c:8f:ea: e0:d8:1d:ca:a5:db:0c:67:c8:86:d7:5f:af:31:82:3c:83:94: 65:53:1e:be:1f:0b:ef:88:0c:ca:a6:71:96:f9:f7:96:bb:1c: 2f:30:9b:a6:8c:9d:ed:c4:8f:35:5e:ba:07:a0:28:0d:9b:81: 65:d0:c7:3d:a4:36:43:70:3d:e5:5d:ba:4e:d5:33:7c:d8:c4: e8:47:13:e7:7d:7b:2a:2f:e9:50:3d:e6:82:44:9a:82:bf:e2: 88:a9:ab:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdLWSDz+SkVKlgs97wmy7NzIhMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2 QkZBQzQ3MzAeFw0yNTEyMjkyMjU2NTNaFw0yNjAxMDIwNjMzNTNaMDMxMTAvBgNV BAMTKDU0QkIzMTk1RjNGRTI4MjZBRDBDQTg2QTEyNUFFRUJENzc5MDBDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4d4K0C1tObdsajKsHGQpe/61 y0cyZLh+xNQ3X+28gxoRqX2xicZ+SC3VoszYdf4PiCT3OeB0r/29hnNSiy8yrd5B daGFnkH3VwzgeBPCh0wPbudxh5SI94G37Rcgyt5KFOnuDLx/Iv9A1k35/oLyfCTf GIno0IDwSl+/D6UXcO+tdeVF1zLzjch7GlsfatYIfaZz0ieWZ0VSDI9nn+7++wQ6 SLMViypxUMEzplA4IeSQibEaFwEiYFC1BnFJ+pErYXEXwN5brpoFXK8dddqPtscK b2mJDgBt82430NGrzLlxply4cVy/ceF93Ly0B5jpMiSeMCcO4BPt2f+PlHPlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVLsxlfP+KCatDKhqElruvXeQDD8wHwYDVR0j BBgwFoAUMMiWRz/F3kA/RlEFn2vhWGv6xHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjcwYWU3Ni05NTk0LTQ5ODAtYjQxMC00OTFhNjMxOWZmM2EvMC8zMEM4OTY0NzNG QzVERTQwM0Y0NjUxMDU5RjZCRTE1ODZCRkFDNDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUxNTg2QkZB QzQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvMzBDODk2NDczRkM1REU0MDNGNDY1MTA1OUY2QkUx NTg2QkZBQzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwKqqBbJoXjELqgfhkNA4lOkHX4Few6ZZ79 X1beo3cASEGP9nr+vWjqD9v/UPUKI2HVGY6dpg4lfWcn+/PvTjoO97JpR+u7prXf m/DrMp1LWqrZQjdGWerZB8MtdyVWcv38mKhyce1jqQ0F8cCBPdet0X4oD8ahVO5S hcSmQSKEXd+Hgna4UhYF+Ve6yb5BqfFwjAQhm9WB5G0wG4GAmhyP6uDYHcql2wxn yIbXX68xgjyDlGVTHr4fC++IDMqmcZb595a7HC8wm6aMne3EjzVeugegKA2bgWXQ xz2kNkNwPeVduk7VM3zYxOhHE+d9eyov6VA95oJEmoK/4oipqyU= -----END CERTIFICATE-----Generated at Wed Dec 31 21:09:49 2025 by rpki-client